Releases: mathematic-inc/if-changed
v0.3.4
if-changed v0.3.4
v0.3.4 is a security patch release — short, sharp, and important. If you're using if-changed in CI pipelines or developer machines, upgrade now to pick up a patched dependency and a more reliable release pipeline. No API changes, no migration needed — just drop it in.
🔒 Security Fixes
git2updated to 0.20.0 — this release patches a security vulnerability in the underlyinglibgit2bindings. If you're runningif-changedagainst untrusted repositories or in shared CI environments, this upgrade is especially important. (#274)
🛠 Improvements
- CI release pipeline hardened — fixed a missing
toolchaininput in therust-toolchainsteps, ensuring the release workflow builds with the correct pinned Rust version every time. (#277)
Install / Upgrade
cargo install if-changedAlready using if-changed with pre-commit? Bump the rev in your .pre-commit-config.yaml:
repos:
- repo: https://github.com/mathematic-inc/if-changed
rev: v0.3.4
hooks:
- id: if-changed
if-changedis free and open-source software by a 501(c)(3) non-profit. If it saves you time in your build pipeline, consider sponsoring the project. Every bit helps!
v0.3.3
if-changed v0.3.3
v0.3.3 is a focused maintenance release that keeps if-changed safe, clean, and reliable — patching a security vulnerability in a core dependency, clarifying the project's license, and overhauling the CI/release pipeline so future releases ship smoothly. No API changes, no migration needed; just drop it in and you're good to go.
🔒 Security Fixes
git2updated to 0.20.0 — this dependency received a security advisory and has been patched immediately. If you runif-changedin environments where git operations touch untrusted repositories, upgrading to this release is strongly recommended.
🐛 Bug Fixes
- Release pipeline repaired — a missing
toolchaininput in therust-toolchainsteps was causing release builds to misbehave; that's now fixed so binaries are built with the correct toolchain going forward. - CI workflows overhauled — the GitHub Actions setup was rewritten from scratch: leaner job definitions, a new dedicated
release.ymlworkflow, automated release-please integration, and cleaner separation of CI vs. publish concerns. Fewer moving parts, fewer surprises.
⚡ Improvements
- License simplified to Apache-2.0 — the previous dual
MIT OR Apache-2.0SPDX expression has been narrowed toApache-2.0only, removing any ambiguity for downstream consumers and tooling. - Dependency freshness —
clap,serde,tempfile,bstr, and a raft of GitHub Actions are all up to date, keeping the supply chain tidy and auditable.
📦 Install
cargo install if-changedOr, to use the latest version with pre-commit, update your .pre-commit-config.yaml:
repos:
- repo: https://github.com/mathematic-inc/if-changed
rev: v0.3.3
hooks:
- id: if-changed
if-changedis free and open-source work by a 501(c)(3) non-profit. If it saves you time in your build pipelines, please consider sponsoring the project. 💙